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CLAIMS 

I claim: \ 

1 . A method for limiting simultaneous copies of content material , comprising: 
communicat ing a copy of the content material to a receiving device , 
communicating a security challenge to the receiving device when the copy of the 
content material is communicated to the receiving device , and 

receiving a security response, based on the security challenge, from the receiving 
of the content material is removed from the receiving device . 



device when the cop> 



2. The method of claiih 

verifying a cei£ification 
content material to 



the 



1 , further including 

of the receiving device before communicating the copy of the 
receiving device . 



3. The method of claini 1, further including 

maintaining a dount of the simultaneous copies of the content material , including: 

incrementing the count when the copy of the content material is communicated 
to the receiving device , and 

decrementing the count when the security response is received from the 
receiving device , and | 
wherein 

communicating^ the copy of the content material is dependent upon the count of the 
simultaneous copies. 
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4. The method of claim 11 further including: 
generating a random number, and 

encrypting the ranuom number via a public key of a public-private key pair that is 
associated with the receiving device to form the security challenge, and 
wherein 

the security responsA includes the random number. 
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5. The method of claim 4, fu ther including 

verifying a certification of the receiving device before communicating the copy of the 
content material to the receiving device , and 

wherein 1 

5 the certification of tha receiving device includes a public key of the public-private key 

pair of the receiving device . 
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6. A check-out/check-in device comprising: 

a catalog controller that is configured to provide a limited number of simultaneous 
copies of content material to qne or more receiving devices, 
15 an encrypter that is configured to provide a security challenge to a receiving device of 

the one or more receiving devices when the catalog controller provides a copy of the content 
material to the receiving devide , and 

a return verifier that is configured to: 

receive a security response from the receiving device when the copy of the 
20 content material is removed from the receiving device , and 

notify the catalog controller whether the security response corresponds to an 
appropriate response to the security challenge. 
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7. The check-out/check-in deviie of claim 6, further including 

a certification verifier tlpat is configured to verify a certification of the receiving device 

, and 

wherein 



the catalog controller is 



dependence upon the certification of the receiving device . 
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irther configured to provide the content material in 
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8. The check-out/check-in device of claim 6, wherein 

the catalog controller is further configured to maintain a count of the simultaneous 
copies of the content material , 

wherein, 

the catalog controller is configured to: 

increment the count when the copy of the content material is communicated to 
the receiving device , and 

decrement the count when the security response is received from the receiving 

device , and 

provid<| the copy of the content material in dependence upon the count of the 
simultaneous copies. 



9. The check-out/check- in device of claim 6, wherein 

the encrypter is configured to encrypt a random number via a public key of a public- 

SsssS 

42 15 private key pair that is a ssociated with the receiving device to form the security challenge, and 

Hi 

J: the return verifier is configured to compare the security response to the random number 

to determine whether th 5 security response corresponds to the appropriate response to the 
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security challenge. 

10. The check-out/check-in device of claim 9, further including 

a certification verifier that is configured to verify a certification of the receiving device 

, and 

wherein 

the catalog conlfroller is further configured to provide the content material in 
dependence upon the certification of the receiving device , and 

the certificatior of the receiving device includes a public key of the public-private key 
pair of the receiving device . 
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1 1 . A receiving de\ 



ice that receives content material and a corresponding security challenge 
from a check-out/c leck-in device , comprising: 

a memory hat is configured to store the content material and the corresponding 
security challenge, and 

a security device that is configured to: 

erase the content material from the memory , and 

communicate a security response to the check-out/check-in device , based on the 
security challenge t\ at is associated with the content material . 

12. The receiving device of claim 1 1, wherein 

the security < levice is further configured to communicate a certification of the receiving 
device to the check -out/check-in device to enable the check-out/check-in device to provide 
the content material to the receiving device . 
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13. The receiving d 
the security 

a dedrypt 
private key pair that 



jvice of claim 1 1 , wherein 
device includes: 

er that decrypts the security challenge via a private key of a public- 
is associated with the receiving device to form the security response. 



14. The receiving 
the security 

device to the check 

the content materi 
the certifies 

pair of the receivin 



qevice of claim 13, wherein 
device is further configured to communicate a certification of the receiving 
-out/check-in device to enable the check-out/check-in device to provide 
to the receiving device , and 
4tion of the receiving device includes a public key of the public-private key 
device . 
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